How to block access to xmlrpc.php for ALL USERS using OpenLitespeed ?

[remics]

How to block access to xmlrpc.php file? | OpenLiteSpeed Community and News

How I could generate a virtual host to apply this setting for ALL USERS?

 

[Cold-Egg]

For the rewrite rule, you can do it on either .htaccess file or the Rewrite tab on web admin.

 

[remics]

Could you explain to me the exact steps that I should follow to block access to xmlrpc.php to ALL USERS?

 

[Cold-Egg]

Check https://openlitespeed.org/kb/how-to-autoload-htaccess-with-openlitespeed/
in virtual host level, do you see Rewrite and Rewrite Rules section? Add the following rule there, and them graceful restart the web server

RewriteRule ^/(xmlrpc|wp-trackback)\.php - [F,L,NC]

 

[remics]

Hi!

I cannot edit any OpenLitespeed WebAdmin settings because by default it is in read-only mode.

 

[Cold-Egg]

Oh, I guess you are using DirectAdmin. You can create a .htaccess file under the virtual host document root, and put the rule there. This way should work too.

 

[remics]

Sorry for the mess!

The OpenLitespeed and DirectAdmin forums look pretty much the same, and as a user of both technologies, I was confused.

I created a thread about this on the DirectAdmin forum which is the appropriate place and I will leave the link here. Maybe I can help someone.

https://forum.directadmin.com/threa...-php-for-all-users-using-openlitespeed.64501/